Contentful application
Contentful is a headless content management platform. MIA connects to it to inventory organization members, invite them with a role, and revoke their access.
Authentication type and prerequisites
Authentication type — Personal access token (Bearer)
Prerequisites
- A Contentful Enterprise organization on a current pricing plan, with the User Management API enabled.
- Organization owner or administrator permissions to invite or remove members.
- A Contentful personal access token.
Create a personal access token
- Sign in to Contentful.
- From a space in the organization, open Settings → CMA tokens.
- Click Create personal access token, name it, and generate it.
- In the token list, make sure its status is Active. If the Authorize button is displayed, click it and explicitly authorize the token for the organization you want to connect. An active but unauthorized token cannot access that organization.
- Copy the token immediately: Contentful will not display it again.
Security
The token inherits the permissions of the Contentful account that created it. Use a dedicated administrator account, keep the token secret, and revoke it if it is compromised.
Connect Contentful to MIA
- In MIA, open Applications → Add an application.
- Select Contentful.
- Enter the administrator token and confirm.
- MIA retrieves the organizations accessible with the token: select the one to connect.
- MIA imports the selected organization's active members.
Troubleshooting
OrganizationAccessGrantRequired: the token is valid, but it is not authorized for the organization. In Settings → CMA tokens, click Authorize next to the token.FeatureNotEnabled/'user_management_api' feature is not enabled: the User Management API is not enabled for this organization. This API is available to Enterprise organizations on current pricing plans; contact your Contentful representative or Contentful Support to verify the subscription and have the feature enabled. MIA cannot bypass this restriction.
Access management behavior
- When adding a member, select their Contentful role: member, developer, administrator, or owner. Contentful sends an invitation by email.
- Removing a member in MIA revokes organization access without deleting their personal Contentful account.
- Contentful does not allow the last organization owner to be removed.
- Contentful invitations are currently exposed through an alpha endpoint, so their behavior may change.
For technical details, see the official User Management API documentation and the personal access token documentation.